adk-frontend
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and implementation patterns for Botpress ADK frontend integration. All identified external resources, including the
@botpress/clientpackage and thebotpress.clouddomain, originate from the vendor's own infrastructure. - [INDIRECT_PROMPT_INJECTION]: The architecture described creates an attack surface where data from external sources is processed by a frontend application. 1. Ingestion points: Data enters the application through
client.findTableRows()andclient.callAction()calls as described inoverview.md. 2. Boundary markers: None identified in the provided patterns. 3. Capability inventory: The application performs UI rendering and state management. 4. Sanitization: The documentation recommends using thesanitize-htmllibrary and provides best practices for secure rendering inrecommended-stack.md. - [SAFE]: The skill illustrates patterns for handling authentication via Personal Access Tokens (PATs). It recommends storing these tokens in cookies with the
SameSite=Laxattribute for protection and includes instructions to avoid hardcoding secrets or logging tokens in client-side code, as outlined inauthentication.md.
Audit Metadata